Exploring and managing risks in cloud: a practical journey to cloud security
summary
Explains cloud security risks from a software engineer/DevOps perspective, covering the shared responsibility model and why teams must detect and remediate cloud risks. Describes key cloud security technologies to consider—Cloud Secure Posture Management (CSPM) and Cloud Infrastructure Entitlement Management (CIEM)—and reviews open-source tools such as prowler for implementing those recommendations.
AI-written summary · about
chapters (15)
- 0:00Welcome
- 1:04Introduction
- 2:50Cloud evolution
- 7:06What is Cloud?
- 13:30Cloud investment risks
- 14:54Real cloud attack example
- 18:47Cloud intrinsic risks
- 20:12Shared responsibility configs
- 21:35CSPM and IAM tools
- 26:30Cloud provider tools
- 29:25Open Source security tools
- 30:50Demo: Brawler vulnerability analysis
- 35:23Conclusions and future
- 37:08Cloud responsibility security
- 39:14Q&A
related talks
58mCloud Attack Surface Management
31mA Comprehensive Approach to Cloud Security Posture Management
48mControlling Clouds: Beyond Safety
50mArchitecting a secure cloud framework
32mIntro to Threat Modeling in the Cloud
50mProtecting the Cloud with the Power of Cloud
49mArchitecting Security for Regulated Workloads in Hybrid Cloud
43mWalking on Broken Clouds